# This is a good place to put slapd access-control directives
#access to *
#    by dn="uid=root,ou=people,dc=th-domena,dc=pl" write
#    by users read
#    by anonymous auth
    
#access to attrs=userPassword,gecos,description,loginShell
#    by self write
#    by anonymous auth

access to attrs="userPassword"
    by dn="uid=root,ou=people,dc=th-domena,dc=pl" write
    by anonymous auth
    by self write
    by * none

access to *
    by dn="uid=root,ou=people,dc=th-domena,dc=pl" write
    by anonymous read
    by * search